CVE-2026-91863 Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service

A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

CVE-2026-91863

A flaw exists in Apache Neethi where a remote attacker can send a specially crafted WS-Policy document containing deeply nested policy elements. This document can bypass the parser's nesting-depth limit, triggering uncontrolled recursion that exhausts the thread stack and crashes the parser, resu...

ROS-20260921-73-0015

The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260921-73-0010

The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2026-59168: Uncontrolled Recursion

Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.1, parsing/json/jsonreader.go decodeValue, decodeObject, and decodeArray, and parsing/xml/reader.go parseElement, recurse once per input nesting level without a depth guard...

ROS-20260921-73-0014

The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2026-91863: Uncontrolled Recursion

A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

ROS-20260921-73-0018

The vulnerability in perl-Net-DNS is related to an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0004

The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260921-73-0008

The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260921-73-0007

The vulnerability in ElasticSearch is related to an uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

Security Bulletin: IBM Event Endpoint Management is effected by Multiple Vulnerabilities

Summary IBM Event Endpoint Management is affected by Multiple Vulnerabilities and was addressed in IBM Event Endpoint Management 11.8.2 Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept extern...

CLEANSTART-2026-UO04337 Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to a denial of service attack when parsing policies...

Security vulnerability affects the wildfly package. Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to a denial of service attack when parsing policies due to runtime memory exhaustion...

Uncontrolled Recursion

Overview braces is a Bash-like brace expansion, implemented in JavaScript. Affected versions of this package are vulnerable to Uncontrolled Recursion in the recursive AST walkers, which lack depth guards. An attacker can supply deeply nested brace patterns that stay within the character limit to...

Exploit for CVE-2026-18464

CVE-2026-18464 — WP Maps Pro This repository is intended as a...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the ordered-JSON marshal/unmarshal paths through the jsonutils/adapters/stdlib/json and jsonutils/adapters/easyjson/json ordered map handlers. An attacker can crash the process by sending a deeply nested JSON...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the ordered-JSON marshal/unmarshal paths through the jsonutils/adapters/stdlib/json and jsonutils/adapters/easyjson/json ordered map handlers. An attacker can crash the process by sending a deeply nested JSON...

Autodesk Shared Components < 1.12.0 / 2.x < 2.2.0 DoS (adsk-sa-2026-0015)

The version of Autodesk Shared Components installed on the remote Windows host is prior to 1.12.0, or 2.x prior to 2.2.0. It is, therefore, affected by an uncontrolled recursion vulnerability. A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontroll...

CVE-2026-61551: Uncontrolled Recursion

Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port...

CVE-2026-59156: Uncontrolled Recursion

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted fits stream containing consecutive 2880-byte header blocks without the mandatory end keyword makes...